Skip to main content

11. What are the methods for gaining control of a domain controller?

  • SYSVOL
  • MS14-068 Kerberos
  • SPN scanning
  • Golden ticket / Silver ticket
  • Domain service account password cracking
  • Credential theft
  • NTLM relay
  • Kerberos delegation
  • ZeroLogon (CVE-2020-1472)
  • ARP
  • CVE-2021-42278 and CVE-2021-42287